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(54) {Sim<om'i mm^^^ii^smm.rm^'yT.v'A, jmrv^ivm^'yT.'rh. 



(57) 

^Ucas^ftfgKa ( i = 1 . 2. •••) i7)d*>lfflUiLh 
^'mi.zmthW^<r>^2cr)t^X^l l b~l l dt 

$8jifli/XTAi7)|tt-f|.. 



1 



13 



11a 
12 



KO 



11b 



Kii 

JraA#n 



11c 
v/ 



lid 



• • • • • 



Km 
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,i(i = i. 2. -) ff)^ibima±.i:vmizm^^ 

iZX-^X^^UzUmmKzij (j = l, 2. ■••) , 
K3ij. (m=l, 2. •■•) . -Od-'pOlfflliLhJrJM 

izmthmmf^s, m4. -cojDA^^istt, 

^mmKiii . Kjii.. -imXiitibXlMMX 

m<^mm<^ohimit}±<7y:>\>^xii. ^h^^im 

Wcjmcommiz-^^^xii, ^timi:unth±x 
«3DA*s:is»ti. zt^mit t&mm2sm<om 

mmb tim:^ 1 j!;S3ov^-m*» i otcteeoni? 

mi<r>m 1 iojis t , itmmK mmmi> z b 

IciO^figLJtaJ^ffifgKa (i = l. 2.-)03^ 

fiiem 1 commi- hummm-m^ ^-thzb t^x-t 
h<n[znL. mim2<r>m.mm\:x±.(r>^Mm-> 

X\imxm^^-thZb-tfiX'% hZ b ^mLbth'ft 

[if*«6] ■ms.m'mi^h\,zmmfm-hzb 

tJ:^T±^L^a5^HP8K2ij (j = l. 2. •••) . 
Kjij. (m=l, 2. •••) . -Od^^OHiUUbSrlg^ 

Mifh oTJi ±Ji^Mc^SiS]fc b mWib 



[ mms ] ffl^Kii J; o xtm^tit:.mimwst 
ia±oi^i<7)^iafc, Tt'izmmKiiim^mhzb 

(CiO±fi!tL^c§i5^WfEK,i ( i = 1, 2.-)£7)^^5 
1 flitLt^?5®tcftj*-r§1gia:«7)^20jiai: Irifttt. 

izii-ox±!$.ifzmmKiii (j = i,2,-), 

Kjij. (m=l, 2, •••) , •••c7)'p*>oHiliLhSrl5?& 
t«»t-|.«liCiOg3, ^4. -O^aSriSft. 

ms^s. «4. -<?)^wi. -eii-rnm^^mico^ 
^^tstSKzij . K3i3„, ■■■^mxiiti^x±.mmm<r> 
mmKii. K2ij . -btizbimibtms 

m<r>mmmc7)o-ib i ma±.i,z-^^^xii. ^ix^iu 

(^ms^mn z b t:^mb-thmsm9sim(^m^i^ 

[000 1] 

t:mmmmmm.i:^tm^inmLx. y/u- 
rbLx^^^'j^ivm^ (i2iE) ^mmmm 

h<r)X'hh, 
[0002] 

mm%^ ixfz^mmmM^zmm:\ ^zb { mim 
m.) iw&'thtz^im(r>i-:>bLx. v^^^mim 

•kz fc^tf ■c-iS§'^$^^^^*>oyi w i: ^mux'^ m 

mm.. m^<n'S:i,ib'>tz>^mt-^^^titzmm.i}-'t^ 

mhfihmMi:%M-rhtz>^i.z^mX'hhZb^X<^ 

hixx\^h> 

[ 0 0 0 3 ] 'mm^l5^<r> 1 OT'J)?. R S A 
Bf§-$rfflV^-Cl2liESl/fTv:5';l^S«:^ (R.Rivest. A. 
Shamir, L.Adleoeui. "A Method for Obtaining Digital 

Sigunatures and Public-Key CryptosysteB",Coiiuiiunic 
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ations of the ACM, 21, 2, 1978. pp. 120-126) iiltK^^:) 

[0 0 0 4] tfz. mm^j: 0 izmzmtmimm-t 

ri^9)vm^<mni. mm^<.zii'>xw^^fit:m. 
mm.>im^m.<^mx'^^Lx'^o-)jmK yvo desaed 

et, Yair Frankel ("Thresholdcryptosystems" , Advances 
in Cryptology-Crypto'89,435, Springer-Verlag, 1990, p 
p. 307-315; "Shared generation of Authenticators and 
Signatures", Advances in Cryptology-Crypto'91,576, 
Springer-Verlag. 1992,pp. 457-469) {,Zi. ^^^iXX 

/;p-ri:VH\ ^<r>c^)V'-y\,zm^h^'^mm^ 
^minx-mt, 

[00 05] 07Kfcv%T. mmm im v^ti-hnm 

•tl.K' i (i = l. 2,-. n) 03-^eD-^l8:BLh 

N i^^-th zuzi.^ 7i<7)im ( n ) K mTt^ii . y 
)u-rt LxcoTi^^im^^^^t&ztmmt^^ 

i^i-iui. ^<rm^^fS.m^ff)m («) 
[00063 msmiim-thfcif>izii. ^imtm 

(Secret Sharing;SS ) tmttlhim^m^^^ixX\'^ 

ibui t ma±<^m^t<'mx% d , t - 1 m^m 
<7)mmx'ii^(^mmi^zmi-ht'coi: o^j:mmi 

[0007] zcDt t , -e^sM^gSrfaTc-rs^ti^tc 

i»t-, c:ofm$r^iSrtS:^^{it#v^ffl^:^f-A (Th 

reshold Scheme) tmiiXi. MWiiZ, A-ShamirfHo 

w to Share a Secret", Communicaions of the ACM. Vol. 
22,11.1979) tc<J:SL#v^fflX^-A{i, <X<^XoizL 

x^m^tii. hii-^mmiw^izmm^^m^ 

I'iXcO^T^^f (x) t:yyyj^l<zmt/. kfflcoM^I. 
iitc«tS^3S5^«Oiif ( i ) ( i = 1 . 2. -. k ) 

&^«>s. cit^iif ( i ) mj^(^mmiXi t^r 



[0008] -f^hh. ff^OT. Desmedt.T. Frankel t 

1 ) m^^y>i'~ri>zMLX^t^titc:<'-yk-=j</yf 
'ji^)im^^^t&tcMz\i. tA<nMxmm:hi3^ 
htiii+^x'hi, 

2 ) t^i^mmm ( t - 1 wt) <r>iax^x'ii. 4 

[0009] 

^^tm. ^<^^)i^-ri,z^tit<x(r>iiMm 
mzmitixa*). i:fioj:^^^m-fc»'^tt, yju- 

rx'<r>mmz\m lx \ tz . 

[0010] *f6BB«i. #aDA«*«Ti'':?/l'S«4jS^: 

mm^-x'^ h^s.^\>^i^mm<.z'm-th ^ t tci 0 . 
hh<n>X'hh. -ttihh. ifmzi%hW.i(nw^<r>B 
imtizbx'f}^. 

[0011] :^\iimzmm2(^^ncomii. itm^ 
^)V-riizmLtz'f'J9)\m^i^::^TJ^^mm'hZb 

X'hh. :if\mizmm3<r)wmm\t. -ft^^t-e 

[0012] :i^\m.zmm4<r>^^mmm\i. 
-rf,zmLtzmmiimx/i^:>^7-2^t:mm-hzbx- 

[0013] 2|stiiffifcf^l.S6£7)^B^cOie<J{i, §t $' 
*'3:©iiC«^SjDA*t J: Olf JS$*il.^l©li0^^yl' 

m,zi^h^i(n%m(r)m\i.. ^^^t^mmf^zmtt 
[0014] i^mAz^hms(n>%^mnmi. $ * $' 
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[00 153 

com 1 coMx^t . Ttcof^mmK i:m^^sn-ti ztiz 
xntf&uzmmmKn {i = i. 2, •••) <7)d*>i 
m^xtnm^z%mhmi<^-m2(Di]Mt Sristt, 

1 1 1, i t i>co(c*t t , fnem 2 «7)jDA^«iK^^ 
[ 0 0 1 6 ] ^ i t', fFiesp^ffl$8^ § (>^zm^m- 

i:itlzi:'^X^s&Lfzm^mK,^i (j = i. 2. 
•••) . K3ij„ (m=l, 2. -) , -COih(^imWL 

i:mizmtim.ff>m3 . m4, •••<7)jDA«$'is 

lm±^^ov^T(i. fit^^^ffil^l-l.aaA^^iStt 
C 0 0 1 7 3 X. *|gBJo^}-«CTi^'^';l-S^i^XTix 

at. 7t<DwmKi:%m^mthztizx*)^it: 

gP^tffSK.i ( i = 1, 2, •••) «oa*>HiliLh^*B^ 

icfiij^-ri.^iSt«oB2cojisi:S:iS{t, miMKomu 
i}'ioiimmx'm^i:i-hzi:tfiT^^<r>izni. m 
m 2 cr>^mmm.a±.<D^Mm -^xa tihxm^ 

[ 0 0 1 8 3 ^ ^ mtimmi $ (.izizmm- 
iztizx^x^^itzmm^Kiii (j = i, 2. 

•••) . K3ij„ (m=l. 2, •••) . -cryd-hcnimm. 

^miz%mhmm<^m3 . m4, -onffiSriftft. 

Mi^h':>XI,it>bX±Mmm(r>M\^t.^j:l. tfz. tcO 



[ 0 0 1 9 3 X, if^mcni^i^xfui. mmmzi, 
x'h-yx. ^mmmzt-yxmn^ixtz. vm<r>m^u. 

ii-ri-C t O^^LTtSi^^tffgKii ( i =1. 2. 
•••)<?) 9 % 1 <iah^«f?&tc»^tf ■&«^<0^2£7)ga 

s-is<t. ffiEm 1 <r>mm.x'\immx'^^mfm. 
m:j±(nmm.v^ii^m>x\i t>i>x^^\mfm 
[ 0 0 2 0 3 -r ' -e, mtimmmi § (:>^zwmm 

•••) , Ksij, (m=l, 2, -) , ■■■<Doh<r)l<!m± 

^w^{zu.mhm.<n'^3 . m4. -<r^m.m<<i. 
Btriens. ^4, -o^Bfi. -eix-e-ixmsgfJiLh<7)i$ 

S5*fSfgK,i. K2ii , -ki-h. tt:. 7t<omS^K 

Sifts. 
[0021 3 

<mmmm i >0 1 mmcomm i co^s^fi^i^/v 

[00 223 mtCiai'^T, 1 1 a~l 1 dt'^^^il/:: 

\><r)\t'mw^m.. \2\mm. \3\xMmx:^ 

m.^iitzw^(n'mmmm. \ i a-i i d sr-^t? 7V^ 

^j^LTfcO. SdA#1 1, 12,-, Infi^yp-r 
rt^^HKilraA^-C'ftDfti'fixKi,, Kij. -. Ki„5- 

s. 

[00233 K^^;w-7*fcfcv>T . ^ji'-nzmthta 

X^^^)V-rk lXfi^^)Vm^i'€i5ok bt:^ 
mi^f\^-riz^-i (^titziih^^ii^ii—rff^X'm 

'tl;<yt-'J{znLX. JPA*OttKo$rffl«.^I.Ci: 
izX^mkX'S^^mThhi}'. JPA^0*<>FttTfcS 

i3-tt:m^i-6*'^*'<^mm~mnxm(,zmhfzm 

^l,zii. -maX^ 1 1 - 1 n CO 3 t , JiUi*^'^Et 
Sifc{Cj:0, SI5^«K,,-K,„£oa*>t,JiLh*fm 

^oT^3i5(Mfs (5^1 ) izx<07z<^immK^mn 

^ix. m y-^-'y^zntXr'J9)im^^'^oZkti^ 
-^mk^£h. 

(00 24 3 ^^fu, Tt(r)wmv^i^^m-h^^zm 
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-rl.t-l<J:^o^«5^:^s^^v;) ttit. t,{±tj: 

t, Kp(i){iK,i-Ki„CO-5^(7)til-:iLhcoa^fflfgK 

I a(b) (b=l, ti ; l<=a (b) <=n) 

oL^l^iiij^df-Ai^D^lliCtCXpd) ( i=l, -t ; 

i<=p ( i ) =<n) i:Rxtxmtifzumm-c 

[0025] 

i=l J-I.j*i Xp(l)-Xp(|) 

•ft^*T'$)&aDA#0{iS^OSife^^;l'-r 
■i-hztifX'th^Lt^T^t. 

[ 0 0 2 6 ] TtT^iL, jDA^h i hm --^^i-f|?gKhi 
jmcD "h. i, m, m, {t^M'K. hi^^Mi^ 

i (ih i j m-<r>±.mzm.-tmm i ojda#. 

j {ih i j m-<7)±fitfiK-ri.l©ii2<oaDA#. mli 

h i j m-<7)±{a{Cfi[Btl.P§l3WjDA^$r*tT».'> 
I.. |i§l2<^jDA*t'-?-c7)±{aJPA«*n 3X' 

fcixtf 2 3 j ( j = 1 , 2 , •••) -ecOSoA^A^fiH^ 

t^U'rfmW,i¥.73.iht£'0 . ^<?)4'<7)JdA«2 3 7cO 
TfiDDA#t'J)il«f3 3 7m (m=l, 2. -)X\ •?• 
<7)jDA**^m-r.|.gP^^ffl?g{iK333. t , 

[0027] <mm<omm2 >m2imn(mm i «o*if 

<^mm 1 1 i5i«««fi!tt'S)i. <, ^;i^-r5BfcM^5ix!tBf 
^^ttzi.iyiv-rm-^T-i'tLx^^mtLtzx ■■/ 

^ti vxtt^ML. ^ti^'tiiimmzm-fimm 

ti -laTco-wmx^mt-yxm 

[00 28] <|liSOJ^®3>03tCfcV^T. 11a- 

I I j ttm!mmm.x'$) *) . 1 2immms>^. i 

3iimiEnxim^ixrzm^<nmmmms.i i a~i 

as:*tf9-r/;i/-ri4. isx'hi. 
[ 0 0 2 9 ] Ko (i, Ttcoimm (s^H) x-h*). / 



iz&mthtM mxmi 1 . 12.-, int-r 

•5.) AWUTfcO. . Kan . "•. K2,„.U. 

mx\ -enmjDA^i i(DTmz&.mtiiax^ (M 
A«2 11. 112. -. 2 1 n' bth) tmnix 

qHI (q>0) l6S&4MSrtl.^ttJ:-:>Tf#'i>fU:a5^J' 

mx\ •en'eiijDA«2 1 2<^qs^c(tT{icojDA« 

(JPA^N12-l, •". Nl2 -n" tth) i)^^ 
[ 0 0 3 0 ] c: c: ti^-t/zi'-rti, mmcomm i<nX 

<ztizxKi. mm<^mm i c7)j/;i.-7-^^fem t/c 

i {i = l. 2. •••) *WI.|!iJi^|ig«l , -it 

^)im^t:^isob Ltzm. Ui^j\^ri,z^i(i>nfc 

T(r)^^x'm^-simx'hh. 

[003 1 ] 1 ) nx^o^imx-m^'^m 

2) SDA*11. 12,-, 1 n{i^COa*><?)-^t 

1 i:)±<n^%mix^im^-^^x'hh, 

3) tfi. JDA^I l*ci^aT-S)l.*-T{ajnA*2 1 

1 , 2 12, -, 2 1 j fcS«-ri.*»S*»Oi(3JilTS:gito 

7t^-&t{±. aDA*2 11. 2 12, -, 2 1 j<^3^ 
cr>-m. 1 2lJiLh*^^» Uzb^ {zm'O. »DA« 1 1 

m.b txi^)v-r<r>m^i<znhh^bti^^b^£h, 

tltzL. mX^2 11, 2 12. -, 2 1 j i<i-^X^ 

Mit:btxh ytu-rb Lxm^th z b li^mx' 

[ 0 0 3 2 ] 4 ) § /ot. Tmz&^mmmzfi^ 

rcoft^# , m3^<nMx^2 1 2 t-ewTfi 
oJ^A#*^'^>^•5.■^7'^?•v^-r^^fc^,^•c, sda#2 1 2 
kim':ri^)V-r<r>mMb^j:h) m.h^\izmnz^ 

%'athZbii^mbts:h. 

<lliS<0jg®4>@4{±. HMcOJgffi3iCj3V^T7U<7)if5 
Ki2. -KinJi^fg^iiKo ^gU^^ffilfiT'ftO, Kzn , 

K212 . Kjij mmmu'itmk}^n<^^'rf'm 
x'hUMi,i. mm<^mm.3bnm.<r)miSiX'hh. my 

)V-rizi5\^X. MX^yi^^-rrSiizmhfitM^-X 

[0033] 1 ) SDA^OJimttT-ffl-fTSItg 

2) JraA«ii, 12,-, I n\.i^<7)o%<r)-m^t 

3) ttz. iPA«l l*<^^3Et'*l.*>T{aaDA*2 1 

1 , 2 12,-, 2 1 j tcffl^-tS^'SA^OWBr^Sia 
ytiii^Wi, 1DA*2 1 1. 212,-, 2 1j«3t 
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1 2iULt.*^'^* Uzt^lzmn. HM 1 1 CO 

tatiL. aPA#2 11. 2 12, 2 1 j 1fit'<X'^ 
St/ii: LT t^;P-rt UTS-t-fSC: fcJi^fllT' 

[ 0 0 3 4 ] 4 ) $ h\,z. Tmzm:tmm<D^ry 
I.. 

<iisft£oj^® 5 >ii 5 {ctjv 5 1 iimmmmmx'h 

13' ^m^<n^L^j:\^^f-:f)V-ri A' it 
[0035] muf. y)v-r<Dm.MX'hhi\Mo 
m 1 ^zm-fhMx^tfz^t^-fy')V-r(oWiX'-'mi\:x 

[0036] <mm<^mB e >ia 6 {iiisficT))^® 5 com 
i\mi^:^T-Mztnfm^b uz^-^^TP 
i-ii<r>xh*), Ko ti<y/i'-r<o^§.^mx'h'o . k,,, 

^e®4^fta#^offl^t^:v^/;^-7•l 3' 

iofftt t^v ^-9-y^^;u-r 1 4 • iifttyfu-riizmm 

[0037] mut. y)\^-r<r>Km^x'h?>isMo 
*^'ffifiEL^lttHi\ nizyju-rff)B§^:p:com^<^m: 
mzii. mm 1 izmtiMx^tfzii-^yy/u-rcom 
x~^ma±.(o^MmiztizX'^x^j:^ix^L. m 
A*i i*WL^{-Hxtf. mm2izmtmxmtti 

[ 0 0 3 8 ] ^ii, 2(s:|6Bfl{i. «Sc^OfilSi 

i^-^i-YitmLrzii'mw.i. i^xrM.hh\^t^m. 

{ttiMC P U^M P U ) ifisS/mV^^Wm^lxtzr'a 

c 0 0 3 9 1 zffim. wmm>t>^\^^fif^ruy 



ii^%mmm-hzhf.z^j:h, ruyyj^o-Yi^^ 

y, A-h'T-f^^^'. %T<X9, itm.r^X9, C 
D-ROM, CD-R, mMrr—y, 
X?-h'. ROM^:i:'S^ffl^<^|.v:i;*^'■C'§l., 

[004 0] tfz. :iy\::>.-9im^Ltzr^y^A 

m.^fih^-^h-ttixhZtl,i-motX'i:,t£\\ 

[ 0 0 4 1 ] § t>^z. wmwij^hmii^fvk-ruyv 

C P U =5: i:f)mm<7)m^co-^ t fzli-k^ ^ff v \ -?• 

[0042] *»Bg^±ieiBiimtcafflt-i.^. 

[0043] 

iwmm^] ammtfzXoiz. ^wMizim. 
fta* t -»A«tc xm^^ti^ y)u-rizm uz 

tts:hm^^<r>h(r)i'mfhl!!\X^ (JifijDA*) t 
ilK(7)gP^^ffi?8K' i (i = l, 2,-, n)^fili#-r 
l.jDA*fc^iS(tl.ii:{cJ;0, IIK*\ ^/di-^ 
ti feLhcOSE^fflffiK ' i Sr-^figUctcoK' ( = K) 

[ 0 0 4 4 ] X, Bf^>';^TAai/*HiTi-'^/l'S=Sv' 

mry^wj: uz\m^'^W£YmM<n2mmiWL 

ftl.^ttJ:'). ^yl.-7-c7)ft«« (7C<7)?M^S:fiSi# 
[0045] X, iiKo ^fiij*-ri.jDA^tKo iO^^ 

ttf8K,i^«}§-ri.jDA*<^fi!!tc, m>^m.v.M-k'yts: 

mKzii ( j =1 , 2, •••) . Ksij. (m= 1. 2. 

••■) . •••$:«j$-ri.jnA*^^(ti.wtcj:o. 



(7) 



!HfMT10-1 98272 



mo. mz±mmmmi-ti-?>. z<Db^^ 
1 0 izii7t<m^m 0 > P^ii m7i<^mm 

T. p^i 2 ^zmm 1 mmm $ ^ izm^^ti 

^klzX^X^^ixtzm^i»\*)m . tv^ai 

^tif::m n + 1 izmthmmmo ii>m^t 

[ 0 0 4 6 3 X. «^xxf A&tA'^^r>'^;PS=gi^ 

^ffiummm'^) muzi.^i^mM<.zith-^x 

titzumm^^mmxmzx mis.^tih'/)v- 
r) \.zmfh-wiMx^mm^t„n mLmm^zx 

li^7VjV—7^zmi-maX^(0-A) coitmt L 

x«§^it/m^tfdm^izpm^ >: tmrnt^j: 
I. 

[ 0 0 4 7 3 X, mmmmm-'yXTj^. ^tUT 

iyfium^^-^rMznK , mmzm^^Wi ixx-^ 

mi^^iim^mco7ib^j:hmm) 
mmtmMmj±mmm(7)^mzX'yx<^^ 



mm^mb^j:^. 

[0048] Oh^OJ; 0 t*^BJT'<±. 1tSiC<0jDA#*^ 

^i^x^Attz',m^'y:^TJ^imm-i>ZbifiX'^ 
h. z<ryniiMmim^^S^i^:^TJ^<ni.ot,z. mic 

mm.m±.cntM<r)^m.\,zii ^m^m.'^mm: 
mm:fmx'ti: < m»-c«oMa*>'^ig^jBA#^, 

SIStN <?)-^KtJ:oT*>l.jDA^^f^S^ff-3C:t*« 

T'^ I. jpA^s-is^ti. zb^zx'o. mix-<^mmiizx o 

mx/^mbtm^m^ mmtrnx-h i . 
[02 3 mmmm2m^i^xTJ^m&mmm 
bm^^m m^-tmThi . 

mv^mm b im^m^ mmtmxh h . 

bm^mtmmhmx'ht. 

mfmmb wM.^m% timm-h mxh h . 
me] mmmmecDm^i^xTj^m^Rvmm 
b m^m^ mmmxh h . 
{m7i^^(r>^^m.-^^^zmhmwMWM- 
mx'hi. 

1 1 '^m^mm 

1 2 JlflK 

14.15 ^^c7)tMS^!M^MSr^t^•^^7'^;^-r 
5 1 



(073 

















Ki 






• • • 


K'fl 
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m2] 
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Kl2 









13 

{'... 



L J - 



I I 
.L._i. 
I I 
I I 



11d 

A. 
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KEY MANAGING METHOD, CIPHERING SYSTEM, AND DECENTRALIZED DIGITAL SIGNATURE 
SYSTEM WITH HIERARCHY 
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Abstract: 

PROBLEM TO BE SOLVED: To provide the key managing method, ciphering system, and decentralized digital 
signature system which are suitably used by groups with hierarchical structure by hierarchically managing how much 
respective subscribers can participate in digital signature generation, etc. 

SOLUTION: For the key managing method which functions on an information communication system including 
information processors which are cormected by a communication path, >=1 1st subscriber 1 la who holds a secret key K 
and 2nd subscribers 1 lb to 1 Id who secretly hold >=1 of pieces of partial information K(sub li) (i=l, 2...) generated by 
decentralizing the original secret key K secretly are provided. While the 1st subscriber can use his or her key K as a key 
of the information communication system, each 2nd subscriber can obtain a key of the information communication 
system for the 1st time by gathering more than a specific constant number t(sub 1) of pieces of partial information K 
(sub li). 
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